From a74ae24b1ac139047651cd3ff8c6a973e623a60f Mon Sep 17 00:00:00 2001 From: slManuel Date: Fri, 12 Jun 2026 12:21:25 -0600 Subject: [PATCH] fix(defect_dojo): apply test tags to individual findings on (re)import The engine only sent tags at the test level, so findings imported to DefectDojo had no tags. Send apply_tags_to_findings=true on import and reimport so DefectDojo propagates the test tags to every affected finding. This restores the exceptions/risk flow that queries findings by tag (e.g. /findings/?tags=engine_dependencies). --- .../defect_dojo/infraestructure/driver_adapters/import_scan.py | 2 ++ 1 file changed, 2 insertions(+) diff --git a/tools/devsecops_engine_tools/engine_utilities/defect_dojo/infraestructure/driver_adapters/import_scan.py b/tools/devsecops_engine_tools/engine_utilities/defect_dojo/infraestructure/driver_adapters/import_scan.py index 6cbf6fbcd..8a6f43e61 100755 --- a/tools/devsecops_engine_tools/engine_utilities/defect_dojo/infraestructure/driver_adapters/import_scan.py +++ b/tools/devsecops_engine_tools/engine_utilities/defect_dojo/infraestructure/driver_adapters/import_scan.py @@ -32,6 +32,7 @@ def import_scan_api(self, request: ImportScanRequest) -> ImportScanRequest: "deduplication_on_engagement": request.deduplication_on_engagement, "lead": request.lead, "tags": ",".join(request.tags) if request.tags else "", + "apply_tags_to_findings": "true", "close_old_findings": str(request.close_old_findings), "close_old_findings_product_scope": str(request.close_old_findings_product_scope), "push_to_jira": str(request.push_to_jira), @@ -89,6 +90,7 @@ def import_scan(self, request: ImportScanRequest, files) -> ImportScanRequest: "deduplication_on_engagement": request.deduplication_on_engagement, "lead": request.lead, "tags": request.tags, + "apply_tags_to_findings": "true", "close_old_findings": request.close_old_findings, "close_old_findings_product_scope": request.close_old_findings_product_scope, "push_to_jira": request.push_to_jira,